Resiprocate: >> Resiprocate >> 1.4.1 Security Vulnerabilities
The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when TLS communication is enabled.
CVSS Score
9.8
EPSS Score
0.394
Published
2018-07-16
Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS response.
CVSS Score
7.5
EPSS Score
0.008
Published
2017-08-18